Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

adobe magento open source 2.4.4 vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3
CVE-2023-22250
Adobe Commerce versions 2.4.4-p2 (and previous versions) and 2.4.5-p1 (and previous versions) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a use...
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
4.3
CVSSv3
CVE-2023-22251
Adobe Commerce versions 2.4.4-p2 (and previous versions) and 2.4.5-p1 (and previous versions) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
7.5
CVSSv3
CVE-2023-22247
Adobe Commerce versions 2.4.4-p2 (and previous versions) and 2.4.5-p1 (and previous versions) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injecti...
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
4.8
CVSSv3
CVE-2023-22249
Adobe Commerce versions 2.4.4-p2 (and previous versions) and 2.4.5-p1 (and previous versions) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged malicious user to inject malicious scripts into vulnerable form fields. Malici...
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
5.3
CVSSv3
CVE-2022-35689
Adobe Commerce versions 2.4.4-p1 (and previous versions) and 2.4.5 (and previous versions) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user&#...
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
5.4
CVSSv3
CVE-2022-35698
Adobe Commerce versions 2.4.4-p1 (and previous versions) and 2.4.5 (and previous versions) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
Adobe Commerce 2.4.4Adobe Magento Open SourceAdobe Magento Open Source 2.4.5Adobe Magento Open Source 2.4.4Adobe Commerce 2.4.5Adobe Commerce
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook